Application Serial No.: 09/917,328 
Amendment and Response to August 10, 2005 Non-Final Office Action 

AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1 . (Currently Amended) A method for providing notification of a privacy lov e la web server , 
comprising: 

determining a plurality of user information collection levels that may b e implemented by 
said web server, wherein each user information collection level relates to a type of info rmation 
that mav be collected from or about a prospective user during a future interaction between the 
prospective user and the web serve rl ovols of privacy ; 

receiving a request for a web page from a user, said request including an indication of 
one or more of user information collection levels that are acceptable to said user; 

determining one user information collection level of said plurality of privaey-levels that 
npplior, to n firr . t intomction conducted bv a uo e rb ased on the indicati o n of the one or more 
information collection levels that are acceptable to said user ; and 

providin g said requested web page to said user, said web page including a notification of 
said ono of said determined p toalit ^user information collection level of privacy levels to said 

-iip rk-y 

UJVl 

2. (Currently Amended) The method of Claim 1 further comprising: 

providing an indication to said user of the determined user information collection level 
prior to providing said requested web page; and 

receiving from said user a consent to provide said requested web page in accordance with 
said determined user information collection level. The method of claim 1, wherein said 
determining a plurality of l e v e ls of privacy includes at least on e of the following: 

establishing said plurality of privacy lev e ls; 

receiving an indication of said plurality of privacy l e v e ls; 

selecting said plurality of privacy lev e ls from privacy l e v e ls previously indicat e d 

by said us e r to be acc e ptable to said us e r; 
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sel e cting said plurality of privacy l e v e ls from privacy l e v e ls pr e viously indicat e d 
to b e acc e ptable to a party involv e d in said first int e raction; 

r e c e iving an indication from said user of a group of privacy lev e ls acc e ptabl e to 
said us e r and sel e cting said plurality of privacy l e v e ls from said group of privacy l e v e ls; 

rec e iving an indication from a party involv e d in said first int e raction of a group of 
privacy l e v e ls acc e ptable to said party and s e l e cting said plurality of privacy l e vels from 
said group of privacy l e v e ls; 

receiving a r e qu e st from a party to conduct e ach int e raction involving said party 
in accordanc e with at l e ast one of said plurality of privacy l e v e ls; and 
roooiving a request from said us e r to conduct each int e raction involving said us e r in 
accordanc e with at least on e of said plurality of privacy l e v e ls. 

3. (Currently Amended) The method of claim 1, wherein said determining one of said plurality 
of privacy l e vels u ser information collection levels that appli e s to a first int e raction conducted by 
a-ttset-includes at l e ast on e of t he following: 

determining if any of said plurality of privacy l e v e ls wer e pr e viously indicat e d by 
said user as being acceptabl e ; 

determining if any of said plurality of privacy l e vels w e r e pr e viously indicat e d as 
being acc e ptabl e by a party involv e d in said transaction; 

identifying at least one privacy l e v e l u ser information collection level from said 
plurality of user information collection p rivaey-levels that was applied during a previous 
interaction involving said user; 

id e ntifying at l e ast on e privacy l e v e l from said plurality of privacy l e v e ls that was 
appli e d during a pr e vious interaction involving a party involv e d in said first interaction; 

providing an indication to said us e r of a s e l e ction of said one of said plurality of 
privacy l e v e ls and r e c e iving from said us e r a cons e nt to conduct said first interaction in 
accordanc e with said s e lected on e of said plurality of privacy l e v e ls; 

providing an indication to a party involv e d in said int e raction of a s e l e ction of 
said on e of said plurality of privacy l e v e ls and r e c e iving from said party a cons e nt to 
conduct said first int e raction in accordanc e with said sel e ct e d on e of said plurality of 
privacy l e v e ls; 
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rec e iving a r e qu e st from said us e r to conduct said first int e raction in accordanc e 
with said on e of said plurality of privacy lev e ls; 

receiving a r e quest from said us e r to conduct said first int e raction in accordanc e 
with a minimum privacy r e quir e ment and d e t e rmining on e of said plurality of privacy 
lev e ls that at l e ast m ee ts said minimum r e quir e m e nt; and 

receiving a r e qu e st from said us e r to conduct said first interaction in accordanc e 
with a sp e cific r e quir e m e nt and det e rmining on e of said plurality of privacy l e v e ls that 
compli e s with said specific r e quir e m e nt. 

4. (Currently Amended) The method of claim 1, wherein said providing a notification of said ene 
of said plurality of determined user information collection p rivacy levels to said user includes at 
least one of the following: 

providing said notification as said user conducts said first int e raction; 
providing said notification prior to said us e r conducting said first int e raction; 
providing said notification aft e r said us e r conducts said first int e raction; 
providing an indication to said us e r of a s e l e ction of said on e of said plurality of 
privacy lev e ls and r e ceiving from said us e r a cons e nt to conduct said first interaction in 
accordanc e with said select e d on e of said plurality of privacy l e v e ls; 

providing said notification prior to providing a W e b pag e associat e d with said 
first int e raction; 

providing said notification prior to allowing said us e r to rec e iv e a W e b pag e 
associat e d with said first interaction; 

delaying said first an interaction until said user receives said notification; 

delaying said first an interaction until said user confirms receipt of said 
notification; 

delaying said first interaction until said user consents to said on e of said plurality 
of privacy l e v e ls; 

providing said notification to a device associated with said user; 

providing said notification to a device being-used by said user during said first 
int e ractio nt o transmit the request ; and 
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providing a communication indicative of said one of said plurality of user 
information collection p rivacy levels to software being used by said use r during said first 
interaction . 

5. (Currently Amended) The method of claim 1, wherein said first interaction conducted by a 
us e r includ e s t he request is received in conjunction with at least one of the following: 

said user conducting a transaction with a service provider; 

said user making a purchase; 

said user accessing a Web site; 

said user using a feature of a Web site; 

said user downloading data from a Web site; and 

said user providing data to a Web site. 

6. (Currently Amended) The method of claim 1, wherein said notification includes at least one 
of the following: 

an identifier associated with said user; 
an identifier associated with said first int e raction t he request ; 
a user information collection p rivacy level identifier; 
a cookie; 

information regarding said plurality of user information collection p rivaeWevels; 

information regarding said on e of said plurality o f determined user information 
collection p rivacy levels; 

a message indicative of said on e of said plurality o f determined user information 
collection p rivacy levels; 

a message displayable by software operating on a device used by said user during 
said first int e raction t o transmit the request; 

an image displayable by software operating on a device used by said user to 
transmit the reques t during said first int e raction ; and 

an image indicative of said on e of said plurality o f determined user information 
collection p rivacy levels. 
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7. (Currently Amended) The method of claim 1, further comprising at least one of the following: 

receiving a confirmation of receipt of said notification by said user; 
receiving a confirmation of receipt of said notification by a device associated with 
said user; 

receiving a confirmation of receipt of said notification by software used by said 
use r during said first int e raction . 

8. (Currently Amended) The method of claim 1, further comprising: 

receiving a notification indicative of a change of level -user information collection 
level of privacy during said first interaction . 

9. (Currently Amended) The method of claim 1, further comprising: 

receiving a request to change a level -user information collection level of privacy 
associat e d with said first interaction . 

10. (Currently Amended) The method of claim 1, wherein at least ono of said plurality oft he 
determined levels -user information collection levels of privacy includes at least one ofthe 
following: 

a requirement that said user be informed of user data received by a party involved 
in said fifs^an interaction; 

a requirement that said user be informed of a retention of user data received by a 
party involved in said first an interaction; 

a requirement that said user be informed of a use of user d ata received by a party 
involved in said first an interaction; and 

a requirement that said user be informed of a disclosure of user data received by a 
party involved in said first an interaction. 

1 1 . (Currently Amended) The method of claim 1 , further comprising: 

providing said notification to a part y involved in said first int e raction . 
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12. (Currently Amended) The method of claim 1, wherein at least one of said plurality of user 
information collection p FtvaeWevels is based on, at least in part, at least one of the following: 

a prior request received from said use r prior to said first int e raction ; 

a request r e c e ived from said user during said first int e raction; 

a request received from a service provide r involv e d in said first int e raction ; 

a typo of data that may b e provided during an int e raction; 
a typ e of data that may bo provided by said us e r; 

a typo of data that may b e received during an int e raction; 
a us e of data provid e d by said us e r; 

a request from said user regarding data provided by said use r during said first 
interaction ; 

a requirement of said user regarding data provided by said use r during said first 
interaction ; 

a disclosure of data provided by said user; 

a party to which data r e c e iv e d from a user may be provid e d; and 

a use of data provided by said us e r. 



13.-17. (Cancelled) 



18. (Currently Amended) The method of claim 1, further comprising: 

determining a second of said plurality of user information collection p rivaey 
levels that appli e s to a s e cond interaction conduct e d by said us e r ; and 

providing a notification of said second of said plurality of user information 
collection p rivacy levels to said user. 

1 9. (Currently Amended) The method of claim 1 , further comprising: 

changing a 4evel -user information collection level o f privacy applied to said first 
interaction during said first interaction ; and 

providing a notification to said user of a-the change in level of user information 
collection p rivacy appli e d to said first interaction . 
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20. (Currently Amended) The method of claim 1, further comprising: 

conducting sakl-afirst interaction in accordance with said ono of said plurality 
o fdetermined user information collection p riyaeWevels. 

21 . (Currently Amended) The method of claim 1, further comprising: 

terminating said first an interaction if said fest-interaction cannot be conducted in 
accordance with said ono of said plurality o f determined user information collection 
privacy levels. 

22. (Currently Amended) The method of claim 1, further comprising: 

providing a notification to said user if said first an interaction cannot be conducted 
in accordance with said ono of said plurality o f determined user information collection 
privacy levels. 

23. (Currently Amended) The method of claim 1, further comprising: 

allowing said user to modify at least one of said plurality of user information 
collection p rivacy levels. 

24. (Currently Amended) The method of claim 1, further comprising: 

modifying at least one of said plurality of user information collection p rivacy 

levels. 

25. (Cancelled) 

26. (Currently Amended) The method of claim K wherein said providing a notification includes 
at least one of the following: 

providing a notification during that the web server is not complying with said user 
information collection level; 

providing a notification that the web server did not comply with said user information 
collection level during an interaction; 
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providing a notification that the web server did comply with said user information 
collection level during an interaction; 

providing a notification that the web server is complying with said user information 
collection level; 

allowing said user involved to retrieve information regarding said determination; 

providing a notification that a party exceeds said user information collection level if it is 
determined that said party exceeds said user information collection level; and 

providing a notification that said party does not exceeds said user information collection 
level if it is determined that said party does not exceed said user information collection level. 

The m e thod of claim 1, whoroin said determining one of a plurality of privacy l e v e ls that 
appli e s to a first interaction occurs aft e r said interaction. 

27. - 44. (Cancelled) 

45. (Currently Amended) A computer program in a computer readable medium for providing 
notification of a privae vuser information collection level, comprising: 

first instructions for r e c e iving data indicativ e of a l e v e l of privacy involv e d in an 
intoraction; and 

second instructions for displaying on a d e vic e a notification indicativ e of said 
l e v e l of privacy. 

first instructions for determining a plurality of user information collection levels 
that may be implemented by the web server, wherein each user information collection 
level relates to a type of information that may be collected from or about a prospective 
user during a future interaction between the prospective user and the web server; 

second instructions for receiving a request for a web page from a user, the request 
including an indication of one or more of user information collection levels that are 
acceptable to said user; 

third instructions for determining one user information collection level of said 
plurality of levels based on the indication of the one or more information collection 
levels that are acceptable to said user; and 
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fourth instructions for providing the requested web page to the user, the web page 
including a notification of said determined user information collection level. 

46. (Currently Amended) The computer program of claim 45, wherein said level of privaeyuser 
information collection i s one of a plurality of possible levels of privae vuser information 
collection for which notifications can be displayed on said device. 

47. (Currently Amended) A system for providing notification of a privae vuser information 
collection level comprising: 

a memory; 

a communication port; and 

a processor connected to said memory and said communication port, said 
processor being operative to: 

determine a plurality of user information collection levels that may be implemented by a 
web server; 

receive a request for a web page from a user, the request including an indication of one or 
more of user information collection levels that are acceptable to said user, wherein each user 
information collection level relates to a type of information that may be collected from or about a 
prospective user during a future interaction between the prospective user and the web server; 

determine one user information collection level of said plurality of levels based on the 
indication of the one or more information collection levels that are acceptable to said user; and 
provide the requested web page to the user, the web page including a notification of said 
determined user information collection level 

. determin e a plurality of l e v e ls of privacy; 

d e t e rmine on e of said plurality of privacy l e vels that applies to a first 
interaction conduct e d by a us e r; and 

provid e a notification regarding said one of said plurality of privacy l e v e ls 
to said us e r. 

48. - 50. (Cancelled) 
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